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comparing an acces s centred group Identified by the Identified user access data 
> ^ W i ^ ' > i -■ 1 ! <■ < V ^ N - c 

■■arid 

einAbhnglhe^^ 

access control group Identified by the identified user ac cess data en t ry b ein g the same 
acces s data entry. 

2. ( Current f> Amended) 1 he medium i^propaga te ds iffn*! of claim 1 wherein at leas! 
one entry in the access control group data includes a characteristic for use in determining at least 
on nln i the user acces it a relating* n i ©s to the east one entry in the 

•assess control group oaia slfBsture . 

unneuj ! k u i i *r »s, | ,j \ ,ifli,to i t t n at levst 
one entry in the access control group data stotetn?e includes a characteristic for use in 
determining at least one entry in the data object access data relati ng s t ru ctur e t hat getetes to the at 
least one entry in the access control group data ssaetefe. 

fly A e< ernedit er-propagat e d s ignal of ch n 1 wherein at least 
one entry in the access control group data sm*e4w-e includes: 

i user characteristic s i del \ east one ei i sei ss da! 
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5 (Current!) Amende if T!a n. <*-f *t ~ - < n \ herein at le; 

>ne entry i t groi r-tieiui=e include Ikatio s ! t 

rule for use in determining: 

t let O f t v 1 *. C\- d. t riti- H ?-vKrM- C 31 let'Si OUC 

ent 1 e access control >d - as e, and 

at I ast o ■<. ent \ in the data >bj 2 d u s« »eto=e fet r-4ates >cktm c to the at least one 
entry in the access control group data 

6. (Currently A v. ^ ! The Hi n e-op f©f^agate4-S3@ra] of claim 1 wherein at least 
Ola Lo ! , ' O^ci - ~hr ^ m ! ,v ' 1 K 'i n , nilt it MX'nilu 

to be perl ned i data object kkntiflet le tone > 1 the* objec es d; 1 

[O re; h meoded ho mcd'am << -^nd + . ^ \1 e 1 

st 1 user access data stw-eiare e i 1 it 
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«h=s x data object, ide e< least oi try in the data obje ss dat 

s f tm the at k one 1 e t r t > > et ! es e t ok 5 t.o the 

least 00c entry in the user access data s-tR-eturo. 

8. (Currently An 1} Tbt me? >r>>p gate4o$±tma i -nhzr o 3 sing 
00 ydierem the data repository f urther includes access role data -O'-.-r :cr • >> -v-v ^ 0" h 
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one entry in the access i e data s i ioi ct km that er milted to be 

performed for at least one entry in the data object access data tSmetee. 
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10. (Currently Amended) The medium 




of claim S wherein at least 
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desired control over access by particular users to particular data objects. 
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acces s contr ol mie entries, an access control rub entry identifyin g a characteristic me thod 
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receivin g an indication of a data obje ct; 

accessing an accesa control role data entry Identllymg a charactctisdc method 

- ■> - ! 1 oo ' ^mii_ 1 1 v. < ^ m 
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char acteristic fo r a u ser and idemifymg a method to determ ine the charac teristic for a data 
objec t; 
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the characteristic tor tire u ser ide ntified b y the characteristic method data structure; 

t, _v ot _ ;_ r i v c ' 1 - 1 ' - , i 

determine th e character istic for the data object ide ntified by the characteristic method 
data structu re: and 
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generating access control information, that permits the user to. access the data 
object con ditioned on the characteristic for the user being the same as the characteristic 
O'i * 'O ol^ea 

17, (Currenth Amended} The medium m ereoaga ad signal of claim 16 - lurthi'? 



18. K'un-emly \rmnded} Tht rud-um of-fJrefagaJ^^gHai o l c!« m \ " a u~ tarn at least 

one coin tlx ra, ui ^ tKdu^s^mdt^-u- Htd^h-H-^ak ics t i, h d 

to determine a user characteristic associated with at least one entry in the user data structure . 
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20, (Currently Amended) The medium e«-^efiag^ ted- s ifflal of claim 1 8 wherein at least 
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determine a user characteristic. 



21 {Curre? i i ed) The nedium s 
eeftrnrising n 1 < i d v v k >s n> v. ' ^ _ ( > u e 
object data. 



4 of claim 16 &w&m 



' (Carre v ; Amended Fh me urn er-n? - hs- asm therein at least 

one cor v in the characts i nm hod 



Se Jl s> i 642,499 
Filed V a t I *=■ ?•'■«>;! 



v deterro r,e a da , ed with at least one :cn\ m tht < ata object data 
stF-aotee. 

2:^ (Carre t Amexedi iLe icdnn ^pp^t^kg^o .i< n 2 *h rein at least 
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24. {Carren Imended) 1 1 ^propagat* s-igs \ claim 2! wherein at least 

< L. v, ,iT\ i UUSUC >'iuU ~* "I ' s ! ' 5 U l ' 11 

eliminating at legist one <: nt « i ecu i stmeteee when using € tthod w 
delera ine a » \ object s. ntctens'.n 

>S j k vi d \ i t a . rMi'i- o m ^ H ^ T ^w^.v^ 

«-siemi t eo tbte^M eompssirtg: 
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n t-" ^t-« x ■■ T-^ t 5 x r _ t object access data h >c c > * c 

est t tt *r\ * u i «.v i > 

a n access control group; and 

executable instru ctions that, when executed perform o peration s comprising: 
!Ps" u,, > " 1 a user. 



No, 1 0/642,499 US 
■ \iigu s ; 1 1. C00A 
: 9 of 17 



searching the use r access d ata to identify a user access data entry that identifies 
n ■ ..." i 

scarghmg _data_ob;ect access d ata to iden tify a data object, acce ss data entr y that 
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entry svdh a n access cont rol group identified by the Identifie d data object access entry; 



enabling 1. 

^-Os$ " 

CC.C-o tO'loOi < 1 ( it . 



lieated user to access the indi cated data o bject cooditiGited oil the 
enti tled by the idcntihed user acces s dat a entry being tbe same 
, die access eontroi groan identified b y the identifie d data obicct 
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reytci\a i;iy aTiindlcation of a user; 
recel vnia a n indication of a data object; 
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chara.clerlst.ic for a u ser and Kl emu vme a method to determine di e ch aracteristic for a data 
object; 
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determine- trie chara cteristic for the data object identified by ihe cha racteristic method 
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27. (New) The medium of claim lb wherein the method to determine the characteristic 
fo; henst compt s the e kh to determine le anrcterisbc t the dat object 

>8 (New) I e medium of c lain 16 where m e rcelhot so dt nine 1 aract stk 
t ' !ki,cos, i v t flic) r t n liui 
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30. (New) The medium of claim 16 wherein the characteristic method data includes a 
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iiK'i and a second cha:av. k.\li\ . ; ideal j. v t seto i meth d «o da it mine . 

characteristic for a aser, ihc first method ;x-:ioj dii'terem irun the second method 

N , i 1 t v ' k e i he s elho< includes «* 

irsi characteristic method data entr> ide i ethos etc; <i 1 k i u c i 

a objec cond characteris! l secant I 
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method. 



